09985260851ee30bb096ad7af203e25173e338feda2df444c21d124d1c38e057

General

Target

09985260851ee30bb096ad7af203e25173e338feda2df444c21d124d1c38e057
Size

76KB
MD5

68b448ab0ad03fe2019211429c57bcaf
SHA1

8b5a55c284935d3e8d48e3c24a5eb999a3de034e
SHA256

09985260851ee30bb096ad7af203e25173e338feda2df444c21d124d1c38e057
SHA512

c8a1222ff75bacd33d25bc0e18f927b1f009ee1b6bcd9b77b6449dd7b46fd08a8ecc9cea53a25dd55cb18191c4014de4c9210ab21f62d23e9c4d1b51be6a9cd8
SSDEEP

1536:HfPvHELn3NEcIxD3NOLn9U8aSN4Ltnuxf+6Hnvalt1R:HPH49EcODdO5U8aSNKt8xilt1

Score

N/A

Malware Config

Signatures

Files

09985260851ee30bb096ad7af203e25173e338feda2df444c21d124d1c38e057
.dll windows x86

a2491a2e72e4caf279acaec20b9fe278

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

KeInitializeTimerEx
ExSetTimerResolution
KeSaveFloatingPointState
ZwOpenSymbolicLinkObject
IoConnectInterrupt
IoGetDriverObjectExtension
strcpy
RtlValidSecurityDescriptor
ZwQueryValueKey
RtlEqualString
RtlUpcaseUnicodeString
RtlInitUnicodeString
KeCancelTimer
RtlCompareString
PoCallDriver
IoDeviceObjectType
RtlIntegerToUnicodeString
FsRtlIsDbcsInExpression
RtlEqualUnicodeString
RtlCharToInteger
FsRtlFreeFileLock
ObQueryNameString
RtlInitString
KeResetEvent
ZwMakeTemporaryObject
RtlVerifyVersionInfo
RtlUnicodeToMultiByteN

Exports

Exports

vm_w_FQy_myq_i
lybu_RPCMJ_ETONAgawxyvv
JXQK__Aqfyjm_llJRH_OrboeZZP_Pc_p_iysp_vva_PIBD
ISyr__igof
WWBRNTRNODOTVYYIEWBXPT_RcsUSZ_djvbpht_sxrpx_jveW_HDEU
CKJ_OHACS__j__r_aolFRAby
lxjauHIneu____qilyz
urWIMBGfC_FCplgsj_uuh_lg_iwIZ_HGP_
Dgru_xc__U_DUIzpor_x_SOOMO_RQIRHnn_NrdhsjJDKVENMZIKE
PYJJ__VADFpW_JXGSR__IIHNmxfsKB
KTX_giiZLHDLWu
tn_szllfc__vC_NPvijz__mvosC
YO_ASw_iY_IOXRB_xn__tCNZKQO_OIIc_gq_c_exe__LRFGDLNLGCP_I

Sections

.text
Size: 24KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a2491a2e72e4caf279acaec20b9fe278

Headers

File Characteristics

Imports

ntoskrnl.exe

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 88KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 10KB - Virtual size: 10KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 1024B - Virtual size: 948B

.text
Size: 24KB - Virtual size: 88KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 10KB - Virtual size: 10KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 1024B - Virtual size: 948B